CVE-2023-3266

Summary

CVE-2023-3266 is a vulnerability affecting CyberPower PowerPanel Enterprise, where an incomplete authentication mechanism exists. If an attacker manages to select LDAP authentication, they can bypass all authentication checks, allowing unauthorized access to the system. This hidden HTML combo box vulnerability requires the attacker to have at least one valid username, but any password will grant administrator privileges upon successful exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.